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J 11 MAY 2 4 2016 

Computer Crime Section 


Office of the Virginia Attorney General 
Attn: Computer Crime Section 
900 East Main Street 
Richmond, VA 23219 

Re: Notice of Security Incident 

Dear Sir or Madam: 

I am writing on behalf of Allen, Allen, Allen & Allen Corporation, P.O. Box 6855, Richmond, VA 
23230 (“Allen & Allen”) to notify you of a recent incident that may affect the security of certain 
personal information of two (2) Virginia residents. Our investigation into this incident is ongoing, 
and this notice will be supplemented with any new significant facts learned subsequent to its 
submission. By providing this notice, Allen & Allen does not waive any rights or defenses regarding 
the applicability of Virginia law or personal jurisdiction. 

Nature of the Data Security Event 

On April 13,2016, Allen & Allen accidentally sent an email that attached a police report containing 
two Virginia residents’ addresses, driver’s license numbers and state of issue to an individual who 
was not intended to receive this information. The inadvertent recipient of the email contacted Allen 
& Allen to notify them that she had received the email and that it was not meant for her. Allen & 
Allen requested that this individual securely delete the inadvertently sent email. Allen & Allen is 
unaware of any misuse of this information. 

Notice to Virginia Residents 

Written notice was provided to the two (2) Virginia residents whose information was inadvertently 
disclosed on May 9, 2016. A copy of that letter is attached as Exhibit A. 

Other Steps Taken and To Be Taken 

In addition to providing written notice of this incident to all affected individuals as described above, 
Allen & Allen offered the affected individuals twelve (12) months of free credit monitoring and 
identity restoration sendees, as well as helpful information on how to protect against identity theft 
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and fraud. To help prevent another incident of this kind, Allen & Allen is reviewing its policies and 
procedures regarding the transmission of sensitive information via email and is retraining employees 
on existing policies and procedures as necessary. 

Contact Information 

Should you have any questions regarding this notification or other aspects of the data security 
event, please contact me at (215) 977-4068. 


Very truly yours, 

Ryan C. Loughlin of 

LEWIS BRISBOIS BISGAARD & SMITH LLP 


RCL 


Exhibit A 



[ALLEN, ALLEN, ALLEN & ALLEN LETTERHEAD] 


[DATE], 2016 


[NAME] 

[ADDRESS] 

Dear [NAME]: 

Allen, Allen, Allen & Allen, P.C. (“Allen & Allen”) is writing to inform you of a recent incident involving 
certain personal information relating to you. We are providing this notice to ensure that you are aware of the 
incident and to provide you with steps you can take to protect your personal information should you feel it is 
appropriate to do so. 

On April 13, 2016, Allen & Allen accidentally sent an email that attached a police report containing your 
address, driver’s license number and state of issue to an unintended individual who was not intended to 
receive this information. Please note that no other information related to you was contained in the email. 
The inadvertent recipient of the email contacted Allen & Allen to notify us that she had received the email 
and that it was not meant for her. Allen & Allen has requested that this individual securely delete the 
inadvertently sent email. 

While we do not have any evidence that any of the information in the email has been misused, we want to 
provide you with information on how to better protect against identity theft and fraud. In an abundance of 
caution, we are also providing you with access to credit monitoring services with Experian’s ProtectMylD® 
Elite. 


Activate ProtectMylD Now in Three Easy Steps 

1. ENSURE That You Enroll By: August 31,2016. (Your code will not work after this date.) 

2. Visit the ProtectMylD Web Site to enroll: w ww.nroteetmvid.com/nrotect 

3. PROVIDE Your Activation Code: [CODE] 

If you have questions or need an alternative to enrolling online, please call (866) 751-1324 and provide 
engagement # PC101351. 

Additional details regarding your 12-MONTH ProtectMylD Membership: 

A credit card is not required for enrollment. 

Once your ProtectMylD membership is activated, you will receive the following features: 

■ Free copy of your Experian credit report 

■ Surveillance Alerts for: 

o Daily Bureau Credit Monitoring: Alerts of key changes & suspicious activity found on your 
Experian credit report. 

o Internet Scan: Alerts if your personal information is located on sites where compromised data 
is found, traded or sold. 

o Change of Address: Alerts of any changes in your mailing address. 



■ Identity Theft Resolution & ProtectMylD ExtendCARE: Toll-free access to US-based customer 
care and a dedicated Identity Theft Resolution agent who will walk you through the process of fraud 
resolution from start to finish for seamless service. They will investigate each incident; help with 
contacting credit grantors to dispute charges and close accounts including credit, debit and medical 
insurance cards; assist with freezing credit files; contact government agencies. 

o It is recognized that identity theft can happen months and even years after a data breach. To 
offer added protection, you will receive ExtendCARE™, which provides you with the same 
high-level of Fraud Resolution support even after your ProtectMylD membership has expired. 

■ $1 Million Identity Theft Insurance*: Immediately covers certain costs including, lost wages, 
private investigator fees, and unauthorized electronic fund transfers. 

■ Lost Wallet Protection: If you misplace or have your wallet stolen, an agent will help you cancel 
your credit, debit, and medical insurance cards. 

Once your enrollment in ProtectMylD is complete, you should carefully review your credit report for 
inaccurate or suspicious items. If you have any questions about ProtectMylD, need help understanding 
something on your credit report or suspect that an item on your credit report may be fraudulent, please contact 
Experian’s customer care team at (866) 751-1324. 

You may also take action directly to protect against possible identity theft or financial loss. We encourage 
you to remain vigilant against incidents of identity theft and fraud, to review your account statements, and to 
monitor your credit reports and explanation of benefits forms for suspicious activity. Under U.S. law you are 
entitled to one free credit report annually from each of the three major credit reporting bureaus. To order your 
free credit report, visit www.annualcreditreDQrt.com or call, toll-free, (877) 322-8228. You may also contact 
the three major credit bureaus - Equifax, Experian and TransUnion - directly to request a free copy of your 
credit report. 

We sincerely apologize for the inconvenience and concern this event has caused you. We want to assure you 
that we continue to take appropriate actions to protect the privacy and security of your information. Should 
you have any questions regarding this incident, please call Nancy Pugh at (804) 257-7586. 


Sincerely, 


Nancy Pugh 
Executive Director 


Identity theft insurance is underwritten by insurance company subsidiaries or affiliates of American International Group, Inc. (AIG). The description herein 
is a summary' and intended for informational purposes only and does not include all terms, conditions and exclusions of the policies described. Please refer to 
the actual policies for terms, conditions, and exclusions of coverage. Coverage may not be available in all jurisdictions. 
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